GHSA-GCVV-72Q8-9V76 Ghost: Server-Side Request Forgery in Image Fetching

Impact A Server-Side Request Forgery SSRF in Ghost Admin allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on internal hosts. Vulnerable versions This vulnerability is present in Ghost...

Ghost: Server-Side Request Forgery in Image Fetching

Impact A Server-Side Request Forgery SSRF in Ghost Admin allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on internal hosts. Vulnerable versions This vulnerability is present in Ghost...

GHSA-3CG5-48J3-V4GV

creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2026-70476

creationtimestamp| type| source ---|---|--- 2026-08-04 20:35:21+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-gmmw-qg98-6j6p 2026-08-06 20:45:02+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-flowise...

CVE-2026-70479

creationtimestamp| type| source ---|---|--- 2026-08-04 20:35:16+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-w2rx-84hp-gg95...

CVE-2026-70482

creationtimestamp| type| source ---|---|--- 2026-08-04 20:35:12+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-rq84-p6rr-vf89 2026-08-04 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvtad5cd2n...

CVE-2026-70480

creationtimestamp| type| source ---|---|--- 2026-08-04 20:35:07+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-rffm-9q57-q649...

GHSA-8X5V-CPV7-8JJP

creationtimestamp| type| source ---|---|--- 2026-08-04 20:31:40+00:00| seen| https://gist.github.com/alon710/a07f9786cabb1f06c1eba431ddd448e4...

CVE-2026-70485

creationtimestamp| type| source ---|---|--- 2026-08-04 20:31:40+00:00| seen| https://gist.github.com/alon710/a07f9786cabb1f06c1eba431ddd448e4 2026-08-04 20:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-8x5v-cpv7-8jjp...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, saf, lerna, npm, librechat, code-server, graalvm, kubeflow-pipelines, langfuse-fips, actions-runner, prism, sqlpad, unleash-proxy, kibana, pulumi, wazuh-dashboard-fips, langfuse, wazuh-dashboard, unleash-fips, unleash, opensearch-dashboard...

GHSA-MQ44-7P77-Q5H7 vulnerabilities

Vulnerabilities for packages: puppygraph-python, tritonserver-backend-vllm-cuda-13.0, kserve-models-web-app, py3.13-scanner-test-libraries-aiohttp, open-webui, dask-kubernetes, airflow-core, py3-cassandra-medusa, lmcache-cuda-12.8, airflow, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk...

GHSA-7P8R-X3MC-P8W7 vulnerabilities

Vulnerabilities for packages: prism, langfuse, vitess, saf, yaml-language-server, opensearch-dashboards, renovate, argo-workflows, serve...

GHSA-PM4M-PH32-GHV5 vulnerabilities

Vulnerabilities for packages: renovate, kubeflow-pipelines...

GHSA-2RC9-8CX9-FXPR vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-4CWX-7WF7-3272 vulnerabilities

Vulnerabilities for packages: langfuse, renovate, vitess, code-server...

GHSA-V3R7-H72X-CJCM vulnerabilities

Vulnerabilities for packages: prism, langfuse, npm, vitess, saf, renovate, pulumi, code-server...

CVE-2026-70477

creationtimestamp| type| source ---|---|--- 2026-08-04 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbt4g2hcj2z 2026-08-04 20:35:19+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5xvg-pmgg-3mxr 2026-08-05...

Moderate: Red Hat Security Advisory: libgcrypt security update

An update for libgcrypt is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...